建立slave型別的dns伺服器

tonykorn97發表於2008-10-09
型別DNS伺服器
DNS伺服器的型別：
Master： 提供dns服務，並且本身含有區域文件。
Slave： 和Master一起提供dns服務，當Master伺服器上的名字地址對更改的時候，會自動更新Slave伺服器來達到同步。
Cache-only： 沒有自己的區域文件，只是幫助客戶段向外部dns請求查詢，然後將查到的結果儲存到他的快取中。
[@more@]
1，pre-configuration check
dig -t axfr example.com @192.168.0.254
host -l example.com 192.168.0.254
2,安裝包
yum install -y bind bind-utils bind-chroot caching-nameserver
3，編輯named.conf
zone "example.com" IN {
type slave;
masters { 192.168.0.254; };
file "slaves/example.com.zone";
forwarders {};
};
4, 修改檔案許可權
[root@station10 etc]# ls -lZ
-rw-r--r-- root root system_u:object_r:locale_t localtime
-rw-r----- root named system_u:object_r:named_conf_t named.caching-nameserver.conf
-rw-r----- root root root:object_r:named_conf_t named.conf
-rw-r----- root named system_u:object_r:named_conf_t named.rfc1912.zones
-rw-r--r-- root named system_u:object_r:dnssec_t rndc.key
[root@station10 etc]# chown root:named named.conf
[root@station10 etc]# chmod 640 !$
chmod 640 named.conf
[root@station10 etc]# ls -lZ
-rw-r--r-- root root system_u:object_r:locale_t localtime
-rw-r----- root named system_u:object_r:named_conf_t named.caching-nameserver.conf
-rw-r----- root named root:object_r:named_conf_t named.conf
-rw-r----- root named system_u:object_r:named_conf_t named.rfc1912.zones
-rw-r--r-- root named system_u:object_r:dnssec_t rndc.key
[root@station10 etc]#
5，啟動服務
[root@station10 etc]# service named configtest
zone localdomain/IN: loaded serial 42
zone localhost/IN: loaded serial 42
zone 0.0.127.in-addr.arpa/IN: loaded serial 1997022700
zone 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 1997022700
zone 255.in-addr.arpa/IN: loaded serial 42
zone 0.in-addr.arpa/IN: loaded serial 42
[root@station10 etc]# service named restart
6，檢視產生的檔案
[root@station10 etc]# cd /var/named/chroot/var/named/slaves/
[root@station10 slaves]# ls -lZ
-rw-r--r-- named named root:object_r:named_cache_t example.com.zone
[root@station10 slaves]# cat example.com.zone
7，測試
[root@station10 slaves]# host -r station10.example.com localhost
Using domain server:
Name: localhost
Address: 127.0.0.1#53
Aliases:
station10.example.com has address 192.168.0.10
[root@station10 slaves]# dig +norecurse station10.example.com @localhost
; <<>> DiG 9.3.3rc2 <<>> +norecurse station10.example.com @localhost
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<
;; flags: qr aa ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1
;; QUESTION SECTION:
;station10.example.com. IN A
;; ANSWER SECTION:
station10.example.com. 86400 IN A 192.168.0.10
;; AUTHORITY SECTION:
example.com. 86400 IN NS server1.example.com.
;; ADDITIONAL SECTION:
server1.example.com. 86400 IN A 192.168.0.254
;; Query time: 14 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Fri Oct 10 00:55:54 2008
;; MSG SIZE rcvd: 93
[root@station10 slaves]#

來自 “ ITPUB部落格 ” ，連結：http://blog.itpub.net/312079/viewspace-1011690/，如需轉載，請註明出處，否則將追究法律責任。

相關文章